Vulnerability GO-2026-6685
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
5 hours ago
October 19, 2026 at 09:08 PM UTC
Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days in github.com/xuri/excelize
>=2.1.0
>=2.1.0
Summary
Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days in github.com/xuri/excelize
Details
Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days in github.com/xuri/excelize
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
5 hours ago
Excelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooks in github.com/xuri/excelize
v2.0.0 - v2.11.0 GO-2026-6684
v2.0.0 - v2.11.0 GO-2026-6684
Unknown
5 hours ago
Excelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooks in github.com/xuri/excelize
v2.0.0 - v2.11.0 GO-2026-6684
v2.0.0 - v2.11.0 GO-2026-6684
Unknown
5 hours ago
Nil-pointer dereference in GetSlicers when a worksheet has extLst present but no drawing element in github.com/xuri/excelize
v2.9.0 - v2.11.0 GO-2026-6687
v2.9.0 - v2.11.0 GO-2026-6687
Unknown
5 hours ago
Mutually-referencing array formulas recurse unboundedly, causing a fatal stack overflow in github.com/xuri/excelize
v2.8.1 - v2.11.0 GO-2026-6688
v2.8.1 - v2.11.0 GO-2026-6688
Unknown
5 hours ago
Panic and memory exhaustion via unbounded CFB stream allocation in github.com/xuri/excelize
>=2.3.1 GO-2026-6689
>=2.3.1 GO-2026-6689
Impacted packages
Timeline
Published
5 hours ago
October 19, 2026 at 09:08 PM UTC
Fixed (v2.11.1-0.20260930021559-01a9ff32fb3c)
19 days ago
September 30, 2026 at 02:15 AM UTC
Last Modified
4 hours ago
October 19, 2026 at 09:31 PM UTC